瓦解注入码的新方法——ISR技术的研究和实现

Research and Implementation of ISR-New Approach Countering Code-Injection

指令表随机化(ISR)技术是一种新型的保护系统免遭任何类型注入码攻击的通用方法。对系统指令表经过特殊的随机化处理,就可以在该系统上运行具有潜在漏洞的软件。攻击者如果不知道随机化算法的密钥,那么他注入的代码对于随机化后的处理器就是非法的,并且会导致运行异常。ISR技术可以用作一个低耗费的保护机制,也能够很方便地用来补充其他机制。

ISR （Instruction Set Randomization） is a new, general approach for safeguarding systems against any type of code-injection attack. Potentially vulnerable software can be executed on the system that has process-specific randomized instruction sets. An attacker who does not know the key to the randomization algorithm will inject code that is invalid for that randomized processor, causing a runtime exception. ISR can serve as a low-overhead protection mechanism, and can easily complement other mechanisms.